CVE-2020-20588

2022-12-1500:00:00

mitre

www.cve.org

file upload

vulnerability

remote attackers

arbitrary code

avatar upload

index.php

AI Score

8.9

Confidence

High

EPSS

0.006

Percentile

79.0%

JSON

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.

References

github.com/zhimengzhe/iBarn/issues/13